$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: 8wbY3SgZSQ21oo6jZxzCPmFkfLfcey9SPA8KQOtY9oc= Subject key identifier: DA:3C:BB:4C:EC:0D:C6:DA:36:D8:D1:6F:47:1B:0A:EA:2D:49:A9:C1 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 0597 Signing time: Sat 14 Jun 2025 23:05:35 +0000 Manifest this update: Sat 14 Jun 2025 23:05:35 +0000 Manifest next update: Sat 21 Jun 2025 23:05:35 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: a6/3J6gI52jFy7Nl/YOAQWskhivGHZ7u/ZE6gtocgBA=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Jun 14 23:05:35 2025 GMT Not After : Jun 21 23:05:35 2025 GMT Subject: CN=684e003f-27e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:e2:ac:4c:df:5e:86:8c:40:4e:da:a0:ab: 9c:7e:d8:15:36:bc:f6:85:a7:e9:33:b0:0c:87:d4: 36:e9:8e:a2:43:87:0c:59:8a:ef:5c:dd:a8:60:14: ba:db:2a:1e:11:33:7f:63:10:7b:19:d0:a4:b4:2b: 79:1e:82:42:84:99:51:bc:28:2f:73:af:e7:70:74: e0:9c:09:20:79:9f:e3:96:32:27:d3:4a:a2:dc:b3: 6b:56:b5:ec:64:6b:3f:ce:da:75:00:5d:6e:d5:63: c5:50:ad:bd:5b:ba:45:9b:ca:8a:c1:74:a2:52:2e: 34:fc:92:3e:c2:cb:7a:bb:b3:57:7a:80:2b:0c:d0: b0:87:4e:23:10:d2:a5:f1:f5:40:31:d4:d9:53:ac: 53:c2:a5:82:e2:52:a4:61:43:95:50:0d:08:81:59: 89:9c:bb:3c:46:9f:fd:4c:8b:1a:61:dc:02:b0:ca: bc:4b:c6:e3:9b:9f:5f:50:48:98:76:2b:8d:d4:d4: 94:f2:a8:e3:49:e0:d4:2d:7d:0a:ef:dd:9f:7d:77: f8:87:f4:7d:8f:d0:b2:7e:1c:07:f0:81:61:6d:59: d8:5c:68:31:8e:2c:af:d2:cc:1e:b4:e4:b8:ee:2b: 0d:15:41:9d:2b:39:f7:83:55:9b:71:95:ae:4f:31: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:BB:4C:EC:0D:C6:DA:36:D8:D1:6F:47:1B:0A:EA:2D:49:A9:C1 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:ff:df:25:f1:17:d4:8a:fc:3a:91:5f:a2:80:c1:2a:9a: 23:46:1d:95:c7:76:10:95:62:cb:61:35:e2:c5:05:cc:15:e9: 69:f8:71:f7:68:be:8a:5c:54:f3:be:48:04:72:a8:90:09:24: 72:e4:0d:be:61:eb:67:91:91:60:c5:68:3a:0b:27:7c:e9:e1: 0d:b7:ca:74:9c:f2:34:38:53:a0:ba:8f:ab:a6:19:26:ed:65: 86:ed:e6:04:f3:d2:57:d6:df:b3:7e:99:57:7d:c6:c8:7b:60: 1e:cf:25:cf:bb:a9:b4:b3:0b:67:e6:12:f9:37:f9:83:a2:b0: d5:2e:82:11:40:fc:fa:93:47:35:eb:a3:58:7e:5d:a6:24:22: 82:de:68:5d:5d:b1:b7:8f:a0:06:48:d0:7c:5a:ca:52:ae:47: e7:bd:d5:02:3e:74:86:bb:1e:8e:5a:28:4e:c6:75:72:8e:a6: f6:6f:30:7f:1c:34:ad:a1:d2:64:1d:c4:d1:c0:f0:7a:a4:aa: 6e:04:c4:c5:d0:a0:30:72:09:59:8b:a9:4f:68:a1:cd:9b:d3: 3d:13:55:59:e7:e4:12:65:d7:da:f3:85:75:76:68:76:1d:18: 73:29:ad:41:5a:fd:2d:6a:54:d9:8a:c5:61:d5:5f:46:f3:b8: 30:a4:59:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwNjE0MjMwNTM1WhcNMjUwNjIxMjMwNTM1WjAYMRYwFAYD VQQDEw02ODRlMDAzZi0yN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBXirEzfXoaMQE7aoKucftgVNrz2hafpM7AMh9Q26Y6iQ4cMWYrvXN2oYBS6 2yoeETN/YxB7GdCktCt5HoJChJlRvCgvc6/ncHTgnAkgeZ/jljIn00qi3LNrVrXs ZGs/ztp1AF1u1WPFUK29W7pFm8qKwXSiUi40/JI+wst6u7NXeoArDNCwh04jENKl 8fVAMdTZU6xTwqWC4lKkYUOVUA0IgVmJnLs8Rp/9TIsaYdwCsMq8S8bjm59fUEiY diuN1NSU8qjjSeDULX0K792ffXf4h/R9j9CyfhwH8IFhbVnYXGgxjiyv0swetOS4 7isNFUGdKzn3g1WbcZWuTzGOrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo8u0zs DcbaNtjRb0cbCuotSanBMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVav/fJfEX1Ir8OpFfooDBKpojRh2Vx3YQlWLLYTXixQXMFelp+HH3 aL6KXFTzvkgEcqiQCSRy5A2+YetnkZFgxWg6Cyd86eENt8p0nPI0OFOguo+rphkm 7WWG7eYE89JX1t+zfplXfcbIe2AezyXPu6m0swtn5hL5N/mDorDVLoIRQPz6k0c1 66NYfl2mJCKC3mhdXbG3j6AGSNB8WspSrkfnvdUCPnSGux6OWihOxnVyjqb2bzB/ HDStodJkHcTRwPB6pKpuBMTF0KAwcglZi6lPaKHNm9M9E1VZ5+QSZdfa84V1dmh2 HRhzKa1BWv0talTZisVh1V9G87gwpFln -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:24 2025 by rpki-client